Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS202559.roa
File:                     AS202559.roa (raw, json)
Hash identifier:          nnGRMDzERWXwJiSgZiCpZsBr4wec2tJQLzRFWiivDWo=
Subject key identifier:   F3:8F:88:47:A3:76:1F:75:34:BE:52:B9:56:7C:CF:F6:5E:9C:92:D7
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       366CCC684F5734F2C3D82156552C77B924F26883
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS202559.roa
Signing time:             Sat 08 Apr 2023 03:25:33 +0000
ROA not before:           Sat 08 Apr 2023 03:20:33 +0000
ROA not after:            Sat 06 Apr 2024 03:25:33 +0000
asID:                     202559
IP address blocks:        2a12:dd47:b000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:cc:68:4f:57:34:f2:c3:d8:21:56:55:2c:77:b9:24:f2:68:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:33 2023 GMT
            Not After : Apr  6 03:25:33 2024 GMT
        Subject: CN=F38F8847A3761F7534BE52B9567CCFF65E9C92D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:f0:c3:bd:1d:b8:92:d0:e4:e2:c7:9c:22:
                    cc:46:81:0c:43:66:7a:45:c0:d1:ed:c6:b0:a9:04:
                    fb:d0:3f:82:d4:44:df:31:1d:b5:c5:31:6a:b4:3f:
                    4b:8f:b1:6c:21:e9:7a:b1:13:cd:20:a8:18:85:db:
                    96:b7:58:b3:03:f9:60:4f:eb:d8:f9:f6:1f:87:5b:
                    f8:8a:76:e0:e1:8b:23:1d:b4:97:6c:86:8a:bc:fb:
                    ea:d5:b4:44:6b:95:c2:1e:75:d8:d6:b4:5c:a7:a0:
                    c2:b7:6e:a6:2d:8d:cb:3b:8b:bf:cf:b1:f6:77:63:
                    bd:12:a8:29:b9:2d:0f:68:1c:85:1b:1d:7e:2b:67:
                    22:67:7a:54:4b:a0:1e:b3:dd:82:06:14:8e:b2:d5:
                    6d:70:91:81:cb:7b:f4:1c:70:99:a6:4d:09:50:24:
                    da:9e:02:2e:6c:12:2b:52:91:48:3f:bd:8e:03:3a:
                    66:5f:b6:2c:c6:66:a3:37:b2:92:81:50:10:aa:91:
                    75:57:f7:8a:d3:e5:20:16:93:1a:5e:90:22:0e:74:
                    4f:0d:d2:d6:0f:fc:07:46:c4:0b:ec:2b:15:55:dd:
                    01:a2:41:37:23:31:17:6c:e7:4f:83:39:8d:86:63:
                    0a:22:40:3d:43:8b:ba:18:bf:66:56:54:1b:ca:af:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8F:88:47:A3:76:1F:75:34:BE:52:B9:56:7C:CF:F6:5E:9C:92:D7
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS202559.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:e8:87:aa:a1:65:6b:e9:02:0c:af:75:c7:a5:2f:07:a0:
         f0:14:32:e9:0e:37:b1:93:4b:6b:e3:db:37:70:94:90:c2:dc:
         39:b0:7f:a0:d4:8d:c8:1a:b4:2b:9a:e1:7b:25:f3:45:00:f4:
         6d:df:cd:62:79:b3:4e:df:10:2b:0e:6a:83:4e:fd:98:48:ef:
         eb:ac:92:a4:17:70:dc:b3:78:da:2c:8b:0b:32:25:bb:9b:15:
         de:d0:f1:3e:3b:00:3a:24:c0:bc:75:5d:0e:29:c3:bb:15:75:
         ab:69:f8:5a:71:35:bf:ed:7c:c5:08:6b:88:19:aa:ca:58:a1:
         79:76:23:15:d8:5b:9a:f2:03:4f:69:f5:9d:32:4b:58:38:f8:
         36:91:e2:91:73:d4:64:3b:1c:dc:29:85:20:41:3c:22:57:ad:
         fc:9f:a0:93:04:9a:8c:91:83:c0:02:c5:3b:e9:5f:b6:82:a8:
         c1:9e:f5:be:01:b0:41:58:3d:90:f4:e7:60:7a:59:d5:85:e5:
         7b:92:e1:81:f6:33:45:e5:a5:45:fc:bf:71:d2:31:57:da:fa:
         d8:10:f1:00:00:28:44:66:75:14:b2:fe:6f:9e:17:78:b0:78:
         8f:26:6e:c0:ef:d0:0d:ec:f4:54:d2:3a:d3:22:fb:2d:ca:13:
         09:ed:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----